Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Geu6yNjoR4Ytq9S8CAtiDrHCDvY.roa
File: Geu6yNjoR4Ytq9S8CAtiDrHCDvY.roa (raw, json)
Hash identifier: kX6FgfIMf15qgxnIaK+UIb7Ex4ZOyMKqScfFpVv55MQ=
Subject key identifier: 19:EB:BA:C8:D8:E8:47:86:2D:AB:D4:BC:08:0B:62:0E:B1:C2:0E:F6
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48CF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Geu6yNjoR4Ytq9S8CAtiDrHCDvY.roa
Signing time: Sun 29 May 2022 00:30:06 +0000
ROA not before: Sun 29 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18639 (0x48cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 29 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=19EBBAC8D8E847862DABD4BC080B620EB1C20EF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:63:96:46:c3:8b:84:37:aa:af:cc:b2:1f:
4c:aa:cb:dd:0c:1b:54:96:33:b4:a6:a7:c6:fb:3c:
90:69:33:a4:cb:1c:ad:d2:4a:43:70:a4:d1:48:73:
18:d4:6a:54:3b:d3:5e:88:9f:9a:d6:85:f2:f6:07:
17:b0:0e:e9:c2:a6:31:81:3b:75:39:61:f0:05:d9:
f9:ae:5c:8b:9f:85:34:b8:3f:b9:2e:ca:53:d7:3e:
df:a8:da:67:29:0d:cd:14:f3:62:f2:82:a7:60:26:
03:5d:e5:98:ee:0d:57:6b:74:e9:d8:cb:1b:07:1d:
e0:88:11:11:61:a4:df:6d:2c:e1:6d:d3:54:da:7e:
a7:90:b6:2a:69:69:4d:77:35:93:ef:59:62:dc:0c:
79:76:12:02:98:f4:ec:9e:5f:2d:ce:3b:cf:cb:fa:
59:63:40:ae:9c:7b:d1:a5:cc:9b:9e:0b:e8:a2:73:
0c:8a:ed:f9:62:0f:ff:4a:5b:80:7a:53:53:25:7f:
5f:e8:e4:d9:be:06:20:8b:7b:8e:89:6d:06:1c:b8:
fa:35:9f:75:05:24:fa:3c:6d:c5:c3:fe:1b:5f:3c:
3f:50:f3:42:bd:f4:17:83:6c:ed:c4:24:d2:cc:3a:
b6:eb:0e:fe:be:7e:f7:8b:ec:0e:f6:dc:0a:7e:47:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EB:BA:C8:D8:E8:47:86:2D:AB:D4:BC:08:0B:62:0E:B1:C2:0E:F6
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Geu6yNjoR4Ytq9S8CAtiDrHCDvY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b9:18:7f:82:f6:01:48:18:37:ad:fe:ce:6f:e2:48:98:27:
7a:a6:5c:3c:c1:53:d1:af:db:9f:ab:a3:32:a6:51:d7:d5:0a:
b1:c2:98:01:af:46:85:f3:44:77:84:c9:6a:6d:c4:2d:1e:1d:
82:e7:2b:fb:c9:76:7e:ea:36:a3:e1:20:85:c1:ad:02:e3:c7:
e5:8c:c8:42:c0:6d:7a:35:ae:98:4f:48:63:0b:2b:53:f5:99:
73:22:7d:7b:ef:27:62:bf:7a:8a:da:3f:44:2e:25:78:f6:ed:
0a:12:3b:b9:99:6f:d9:59:b9:ba:85:e9:b7:6c:06:10:0d:2e:
64:3e:7f:a0:38:00:40:5f:03:f1:21:9e:05:b3:80:bc:94:5c:
79:2a:44:ef:fc:60:b6:7b:83:ea:73:91:85:df:c4:40:a8:72:
cd:ad:b3:c5:e1:1c:ef:0e:4e:34:18:ea:55:74:d8:66:7a:10:
71:32:e0:8f:da:ab:eb:b5:92:56:2f:d7:bc:6a:73:f7:98:5d:
e1:1a:28:a1:64:ec:ad:7f:92:ce:84:e9:e8:c8:3d:e9:17:dc:
a2:59:ad:60:78:cd:18:57:16:d4:fd:2f:d4:23:02:5d:ae:63:
8e:dc:57:32:39:15:2c:2a:44:92:f1:4c:be:18:6a:cc:f4:4f:
f4:6b:74:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:36 2023 by rpki-client on console-fra.rpki-client.org